Yamaha vulnerabilities
We track 5 vulnerabilities in Yamaha products across 6 products. 5 are rated high or critical, and none are known to be exploited. The most recent was published on October 29, 2026.
Latest Yamaha vulnerabilities
- 8.4 High severity
YMS-VPN8: Unquoted Search Path or Element
YMS-VPN8 and YMS-VPN8-CP provided by Yamaha Corporation register Windows services with unquoted file paths. A user who has write permissions on the system drive may be able to execute arbitrary code with SYSTEM privileges.
- 9.8 Critical severity
NWR100: Improper Neutralization of Special Elements used in an OS Command
Yamaha wireless LAN router NWR100 provided by Yamaha Corporation contains an OS command injection vulnerability. Arbitrary OS commands may be executed by sending a specially crafted request to the affected product.
- 8.4 High severity
Yamaha LAN Monitor for Windows: Uncontrolled Search Path Element
The installer for Yamaha LAN Monitor for Windows provided by Yamaha Corporation may insecurely load Dynamic Link Libraries (DLLs). When the installer is launched in a directory containing a specially crafted DLL file, the malicious DLL may be loaded, resulting
- 7.1 High severity
VOCALOID6 Editor: Improper Restriction of XML External Entity Reference
VOCALOID6 Editor provided by Yamaha Corporation improperly restricts XML external entity references. Loading a specially crafted project file may the product to initiate unintended communication, potentially leading to the leak of sensitive information from th
- 8.4 High severity
headphones_controller_firmware: Incorrect Authorization
Incorrect access control in the firmware update and download processes of Yamaha Headphones Controller v1.6.7 allows attackers to access sensitive information by analyzing the code and data within the APK file.